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(57) Abstract: The described method is used for gener- 
ating a security document by applying a security pattern 
to an original image. The security pattern comprises a 
plurality of points, wherein each of said points represents 
a pattern value. Local averages are calculated from said 
pattern values for at least some areas of the security pat- 
tern. For at least some of the points of the security pattern 
the color of the corresponding point of the original im- 
age is replaced by a modified color. The modified color 
is a function of the local average, the original color and 
the corresponding pattern value. The method provides 
good security against counterfeit because it is difficult to 
implement using conventional image processing appli- 
cations. For a suitable choice of the color transformation 
function, the resulting image can preserve the local color 
tones of the original image. 


< 

in 

00 


O 



>,♦>,*> 
♦At.v 

♦AtAtA*A*A*A*A 

XvX* 
»>♦* 

♦x*a> x**x* yy*x 

♦X*X«Xw.mXv. 

XtX** 

*X*a*a*a*a*a*a 

>t»» 

♦X*X*X*>X*X*X+! 

XvX* 

♦X*Xi*X*Xt A*A*. 

♦X*»X*X*w>» 


♦X*.1A*A*X*A*At. 

XvX* 

vXvX*A*X*Xv. 

ava* 
♦.*.♦.♦♦ 
♦a*a» 

»X*X*X+av*a*a 

V *At MAt AVA*. 

*X*XvX*X**X*X 

ava*- 
av.v 
XvX* 

♦X*X»X*,w.mX*. 
♦X*X»aXw*a*X 


♦>X* ♦ Xt.w AM ♦. 

v*>>>>>>>>>> X?X*X*X 
y«y*y*> fty»y<M>y»y 


aCf + (l-a)Cb 


Bbbl 


WO 01/08405 Al 


iiiniiiDiiiiiiiiiiinii 


patent (AM, AZ, BY, KG, KZ, MD, RU, TJ, TM), European 
patent (AT, BE. CH, CY, DE, DK, ES, FI, FR, GB, GR, IE, 
IT, LU, MC, NL, PT, SE), OAPI patent (BF, BJ, CF, CG, 
a, CM, GA, GN, GW, ML, MR, NE, SN, TD, TG). 

Published: 

— With international search report. 


For two-letter codes and other abbreviations, refer to the "Guid- 
ance Notes on Codes and Abbreviations " appearing at the begin- 
ning of each regular issue of the PCT Gazette. 


WO 01/08405 PCTVIBOO/00984 


Method for generating a security document 


Cross References to Related Applications 

5 

This application claims the priority of the 
European patent application No. 99114740.6, filed on July 
28, 1999, the disclosure of which is incorporated herein 
by reference in its entirety. 

10 

Technical Field 

The present invention relates to a method for 
15 generating a security document and to a security document 
obtained by this method according to the preamble of the 
independent claims. In particular, it relates to the 
field of security printing, and more particularly it re- 
lates to anti-counterf eiting measures for identity docu- 
20 ments showing a photograph of their holder. 

Background Art 

Many identity documents bear a photograph of 
25 the document holder, because this photograph offers a 

convenient way of relating the document to its owner. The 
development of plastic card printers and the advances in 
digital imagery have lead to the widespread use of iden- 
tity documents printed on plastic cards, such as ID 
.30 cards, driving licenses and access key cards. 

With the advance of color printers and copi- 
ers, it has become easy to forge such documents unless 
they are provided with security features, such .as digital 
watermarks, microscopic text, etc. Such security features 
35 are, however, difficult to apply or to verify and they 
often impair the overall appearance of the document. 
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Disclosure of the Invention 

Hence, it is a general object of the inven- 
tion to avoid at least part of these disadvantages. This 
5 object is achieved by the subject-matter as set forth in 
the independent claims. 

Hence, at least some of the points of the 
original image are modified by changing their color. The 
change of color is a function of the original color C^j, 

10 of the value p-^j of a security pattern as well as of a 

local average ct^ of the pattern. By using a function that 
depends on a local average of the pattern, it becomes 
possible to generate very flexible security markings that 
take the pattern's features into account. The protected 

15 image is difficult to imitate by using commercial image- 
processing packages because the changes in the protected 
image do not occur along a fixed direction of the color 
space, but vary according to the color of the original 
image pixels and the averages of the security pattern. 

20 The embedded pattern can e.g. be textual in- 

formation already present elsewhere on the document, or 
it can be a code derived from data specific to the docu- 
ment holder. The protection can be made fully apparent, 
partly apparent,. or completely invisible under normal 

25 viewing conditions. 

In a. preferred aspect of the invention, a 
chromatic shift is given for any color of the original 
image. This shift is defined by the two colors that are 
used when the pattern value takes its minimum and maximum 

30 values. In this case, the function f can e.g. consist of 
a linear interpolation between the two colors of the 
chromatic shift. 

The chromatic shift can be derived from a 
reference shift at one specific color K. Preferably, a 

35 correcting offset is applied to this reference shift for 
balancing it according to the local average ot^ of the 
pattern. The chromatic shift can be calculated by cor- 
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recting the luminance, hue and saturation of the refer- 
ence shift (or the corrected reference shift) . A further 
possible correction adjusts the values of the chromatic 
shift to make its CIE-Lab luminance difference equal to 
5 the one of the reference shift, which results in a uni- 
formly contrasted pattern for any original color value. 

The protected image is difficult to reproduce 
through photo-mechanic means such as a photocopying de- 
vice, because the chromatic shifts it contains can be 

10 specified as quasi-metameric pairs of colors. Either the 
pairs of colors are perceived as identical by the device 
and the embedded information is completely lost, or the 
pairs of colors are perceived as being more different 
than they really are and the embedded information becomes 

15 much more visible under normal light than it is in the 
protected image. 

Identity documents containing images with em- 
bedded text are even more difficult to forge, because the 
embedded text can contain an encrypted version of the 

20 personal information present elsewhere on the document. 
Without knowledge of the process used for encrypting the 
text, it is impossible to adapt an existing document to a 
fake identity by replacing the photograph and the per- 
sonal information. 

25 The invention is especially suited for mark- 

ing identity documents, such as driver's licenses. 

Further preferred features and embodiments 
are described in the dependent claims. 

. 30 

Brief Description of the Drawings 

The invention will be better understood and 
objects other than those set forth above will become ap- 
35 parent when consideration is given to the following de- 
tailed description thereof. Such description makes refer- 
ence to the annexed drawings, showing in 


WO 01/08405 


PCT/IB00/00984 


Fig. 1 a single character and its correspond- 
ing gray level (top row) as well as the equality of two 
areas having the same local average, 

Fig. 2 the LEF color space, 
5 Fig. 3 a bitmap pattern for a given string, 

Fig. 4 the calculation of the average value 
for a letter bitmap, 

Fig. 5 the balancing of the reference shift, 

Fig. 6 the assembly of a text into its pat- 
io tern, 

Fig. 7 the repetitive arrangement of the pat- 
tern of Fig. 6, 

Fig. 8 the repetitive arrangement of the pat- 
tern of Fig. 7, 

15 Fig. 9 the staggering of the pattern on Fig. 

8, 

Fig. 10 the individual balanced reference 
shifts of differing letters, 

Fig. 11 the horizontal interpolation of the 
20 reference shifts, 

Fig. 12 the vertical interpolation of the 
reference shifts, 

Fig. 13 the luminance correction, 

Fig. 14 the hue correction, 
25 Fig. 15 the saturation correction, and 

Fig. 16 the overflow correction. 


Modes for Carrying Out the Invention 

30 

A preferred embodiment of a method that pro- 
tects identity documents by embedding text into photo- 
graphs is described hereafter. The method consists of the 
following basic steps: A reference chromatic shift (the 
35 "reference shift") is specified in a linear color space. 
Each character of the text to embed is rasterized into a 
bitmap. The reference shift is corrected for obtaining a 
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coverage-balanced chromatic shift ( "corrected chromatic 
shift") derived for each rasterized character according 
to the ratio between the surface occupied by black pixels 
(foreground) and the surface occupied by white pixels 
5 (background); i.e. according to a local average of the 
security pattern. The rasterized character string is re- 
peated horizontally and vertically to form a security 
pattern. A pattern-relative chromatic shift is interpo- 
lated between the coverage-balanced chromatic shifts of 
10 the neighboring bitmap characters for each pixel in the 
security pattern. A chromatically shifted color is ex- 
trapolated from the pattern-relative chromatic shifts for 
each pixel of the original image. The protected image is 
generated and output on a continuous-tone printer. De- 
is pending on the size and orientation of the reference 

chromatic shift, the embedded text in the protected image 
can be visible or invisible under normal viewing condi- 
tions . 

20 Chromatic shifts: 

A "chromatic shift" is defined as a set of 
three colors C, and Cf such that a surface of unitary 
area colored with C is visually equivalent to the same 
surface split in two foreground and background parts of 

25 area a, resp. 1 - a, with the foreground having color Cf 
and the background having color C^ (Fig. 1) . Mathemati- 
cally, the colors of a chromatic shift must verify the 
relation C = a Cf + (1 - a) Cfc. C represents the refer- 
ence color, Ck represents the reference background color, 
.30 and Cf represents the reference foreground color. 

An additive color space is used for specify- 
ing the colors of a chromatic shift. Preferably, this 
color space is obtained by a linear transformation of the 
cube formed by the RGB space. 'The transformation and its 

35 inverse are defined by the following equations: 
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After transformation, the RGB cube stands on 
its black corner (Fig. 2). Its black-white axis is verti- 
5 cal and becomes the L-axis in the newly defined LEF color 
coordinate space. The two other E and F orthogonal axes 
are lying in the plane perpendicular to the L-axis 
through point L = 0 (the EF-plane) . The E-axis goes 
through the projection of vertex R of the RGB cube on 
10 plane EF. The vertical L component can be assimilated to 
the achromatic value of a given color, i.e. its luminance 
level. The E and F components convey the chromatic infor- 
mation pertaining to that color. 


15 Choosing the. reference shift: 

The reference shift {K, K^, Kf } for an arbi- 
trary color K is specified by an interactive; color pick- 
ing application according to N. Rudaz,. R. D. Hersch, V. 
Ostromoukhov, Specifying color differences in a linear 

20 color space (LEF), Proceedings of the IS&T/SID 97, 
Scottsdale, 1997, pp. 197-202. 


Creating a partial security pattern: 

The string of characters forming the text to 

25 embed into the image is converted into a bitmap image 
through the use of a font rendering software component. 
Suitable types of font renderers are known to a person 
skilled in the art and are e.g. described in R.D. Hersch, 
"Font Rasterization, the State of Art", in "Visual and 

30 Technical Aspects of Type", Ed. R.D. Hersch, Cambridge 
University Press, 1993, pp56-63.. An example of a font 
renderer is the FreeType engine described at the URL 
http: //www. freetype.org/intro.htm. 
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The font rasterizer creates a rectangular 
bitmap for each character in the string of text (Fig. 3), 
which will form part of the security pattern. 

5 Local averaging : 

In the case of a binary bitmap , local aver- 
ages a^, defined as the black coverage percentage, are 
calculated for each character bitmap, lies between 0 
and 1; it is defined as the ratio between the number 
10 of foreground pixels and total number P t of pixels or, in 
other words, if a pattern value Pij of 1 is assigned to 
the foreground pixels and a pattern value p^.j of 0 to the 
background pixels, corresponds to the average of the 
pattern values (Fig. 4) . 

15 

Correcting the reference shift: 
A coverage-balanced chromatic shift {K, K^' , 
Kf'} is derived from the reference shift {K, K^, Kf} for 
each character bitmap. The chromatic distance D = K^ - Kf 
20 is computed. An offset d is derived from D using' the re- 
lation 

d = D-«x k - (p max - P m in>/2)/(p max - Pinin ) , 
wherein Pmin and Pmax are the largest and smallest possi- 
ble pattern values (for binary patterns we usually have 

25 Pmax = 1 and Pmin = °> • 

This offset d is added to and to Kf in 
order to obtain K^' and Kf' (Fig. 5): 

K b ' = K b + d, (2) 
K f ' = Kf + d 

30 The resulting coverage-balanced chromatic 

shift {K, Kb', Kf'} exhibits the property that, if the 
white pixels of the associated character bitmap are col- 
ored with K^' and the black pixels with Kf ' , then the av- 
erage color of the character bitmap is equal to K. 
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Generating the security pattern: 
The rasterized characters are horizontally 
juxtaposed into a rectangular tile (Fig. 6) . This tile is 
horizontally repeated side by side as many times as nec- 
5 essary in order to produce a second bitmap with the same 
width as the original image (Fig. 7) . The second bitmap 
is vertically replicated side by side as many times as 
necessary in order to produce a third bitmap image with 
the same height as the original image (Fig. 8) . At each 

10 vertical repetition, the second bitmap is shifted hori- 
zontally in order to avoid disturbing optical artifacts 
that appear when characters are vertically aligned in a 
text. After the horizontal shift, the portion of the sec- 
ond bitmap that goes beyond the horizontal boundaries of 

15 the original image is wrapped around (Fig. 9). This third 
bitmap is referred to as the security pattern and consti- 
tutes an image of the text that will be embedded into the 
original image. 


20 Calculating the pattern-relative chromatic shifts: 

A pattern-relative chromatic shift is com- 
puted for every pixel of the security pattern, based on 
the coverage-balanced chromatic shifts associated with 
the character bitmaps. 

25 In a first step, every pixel of the security 

pattern that is located at the center of a character 
bitmap is associated with that bitmap's coverage-balanced 
chromatic shift (Fig. 10) . 

In a second step, every pixel of the security 

30 pattern that is located on a horizontal line segment 

joining two centers of the character bitmaps is associ- 
ated with a pattern-relative chromatic shift that is ob- 
tained by linear interpolation between the coverage- 
balanced chromatic shifts associated with these two cen- 

35 ters (Fig. 11) . 

In a third step, every pixel of the security 
pattern that is located on a vertical line segment join- 
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ing two pixels processed during the second step is asso- 
ciated with a pattern-relative chromatic shift that is 
linearly interpolated between the pattern-relative chro- 
matic shifts of these two pixels (Fig. 12) . 
5 In a fourth step, every pixel of the security 

pattern that has not been processed during the previous 
steps is associated with the pattern-relative chromatic 
shift of its nearest neighbor. 


10 Calculating the chromatic shift: 

Each pixel in the security pattern is associ- 
ated with a pixel having the same coordinates in the 
original image. The pattern-relative chromatic shift un- 
dergoes a geometrical transformation in the LEF color 

15 space, with the purpose of adapting its background and 
foreground colors (K^' and Kf ' ) , so that the color re- 
sulting from the average of the adapted background and 
foreground colors is equal to the color Cj_j = {L>q, Eq, 
Fq) of the associated original pixel. 

20 In a first step, the luminance of the chro- 

matic shift is corrected according to the luminance dif- 
ference between the reference color K and the color j . 
For this purpose, the luminance difference ALq^ between 
Cij and K = (Ljq, Er/ Fr) is computed using the relation 

25 AL CK = L c - L K , (3) 

and this luminance difference is added to K', K^' and Kf' 
in order to obtain the colors K' ' , K^' ' and Kf'' (Fig. 
13) . 

In a second step, the hue of the chromatic 
. 30 shift is corrected according to the hue difference be- 
tween the reference color K and the color j . For this 
purpose, the angular hue difference (AHq K ) between C and 
K' ' is computed using the relation 

AH CK = Tan(Arctan(F c /E c ) - Arctan (F K ' ' /E K ' ' ) ) , (4) 
35 and this angular hue difference is added to K' ' , K^' ' and 
Kf'' in order to obtain the colors K' " , K^' ' ' and Kf''' 
(Fig. -14). 
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In a third step, the saturation of the chro- 
matic shift is corrected according to the saturation dif- 
ference between the reference color K and the color j . 
For this purpose, the saturation difference (ASq^) be- 
5 tween C and K' ' ' is computed using the relation 

AS CK = sqrt((F K "' - E c ) 2 + <E K " ' - E c ) 2 ), (5) 
and. this saturation difference is added to K B ' ' ' and 
Kp' ' ' in order to obtain the colors and Cf (Fig. 15). 

In a fourth step, the CIE-Lab luminance dif- 
10 ference between and Cf is adjusted so that it is equal- 
to the CIE-Lab luminance difference between and Kf 
while maintaining the balanced average of Cfc> and Cf at 
color C^j 

In a fifth step, the colors Cfc> and Cf are ex- 
15 amined to see if they fit in the RGB color space. If this 
is not the case, the distance between Cfc> and Cf is pro- 
portionally reduced until both colors fit entirely into 
the RGB space (Fig. 16). 

Applying the chromatic shift: 
In a sixth step, the value p^j of the secu- 
rity pattern pixel associated with the original image 
pixel is examined. If this pixel is white (e.g. corre- 
sponding to pij = 0) , and therefore belongs to the back- 
ground of the security pattern, then the color is as- 
signed to the pixel of the original image. If this pixel 
is black (Pij = 1) , and therefore belongs to the fore- 
ground of the security pattern, then the color Cf is as- 
signed to the pixel of the original image. In general, 
for non-binary security patterns, the new color C^ j ' is 
calculated from 
Cij' = C b <C i:j ) • (Pij - Pmin)/<Pmax " Pmin> + <6) 
Cf (Cij) • (Pmax - Pij)/<Pmax " Pmin) ' 
where Pmin anc * Pmax are *~he minimum and maximum possible 
pattern values pi j . 


25 


30 
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Printing the modified image: 

The modified image is output on a continuous- 
tone printer such as a dye- sublimation printer. Dithering 
devices that apply halftone screens on the images they 
5 print, such as laser printers or ink-jet printers, are 
not suitable for printing the protected images because 
the . dithering process alters the structure of the embed- 
ded text . 

10 Detection of the embedded text: 

If the reference shift {K, K^, Kf} presents a 
large enough contrast, the embedded text is. readable un- 
der normal viewing conditions. Conversely, if the refer- 
ence shift {K, K^, Kf} presents a weak contrast, the em- 

15 bedded text is invisible and a close inspection or image 
analysis is required in order to read it. 

Remarks : 

The order of the various steps described 
20 above can be changed. In particular, the average values 

can be calculated after the security pattern of Fig. 9 
is generated, and the steps for correcting the luminance, 
hue and saturation of the color shift are interchange- 
able. 

25 The local averages ot^ have been calculated as 

the averages over the individual characters of the secu- 
rity pattern. It is, however, also possible to use other 
averaging techniques. In particular, the security pattern 
can be processed by a low pass filter, where each point 

30 is e.g. replaced by a weighted average of itself and a 
number of neighboring points . 

As already indicated, the security pattern 
may be non-binary and can e.g. consist of various gray 
levels, such as they may be used for representing anti- 

35 aliased characters. 

In more general terms, the method described 
here starts from an original image and a security pat- 
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tern. It calculates local averages of the values Pij 
of the security pattern, e.g. by averaging over the 
bitmap of one character or by running the security pat- 
tern through a low pass filter or by using interpolation 
5 techniques of averaged values such as described by refer- 
ence to Figs. 11 and 12. In particular, the local average 
of an area k can e.g. be calculated from 

a k = £ A k#i j -Pij (7) 
wherein A k is a matrix of weights and Z is the sum over 
10 the points with indices i,j in said area k. In the exam- 
ple above, the area k corresponds to one character bitmap 
and Aj^ i j = 1/N k , wherein N k is the number of points in 
said area . 

For at least some of the points of the origi- 
15 nal image, the color Cj_j of the original image is re- 
placed by a color C'ij using a function f : 

C-j = f(Cij, Pij , <X k ), 
wherein the function f depends on at least one local av- 
erage a k of an area k said point Pij is located in. 
20 Preferably, f should have the property that 

if m and M are real numbers with m < a k < M, and wherein 

c m = f ( c ij' m ' a k) and C M = f < c ij' M * a k> » and if c ij 
lies within a color space with a Euclidean metric and we 

define R m as the Euclidean distance between C m and C^j 

25 and as the Euclidean distance between Cjuj and Ci j , then 

for any value pij in the interval [m, M] , the Euclidean 

distance between C^j and f(Cij, Pij/ Ot^) lies within the 

interval [0, max(R m , R^) ] • In addition to this, f should 

by continuous. 

30 In other words, for pattern values that are 

close to the local average, f should be such that the 
color of the original image is changed only slightly. In 
this way, the appearance of the protected image remains 
globally identical to the appearance of the original im- 

35 age. 

If an averaging technique according to Eq. 
(7) is used, f is preferably such that 
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2 <A k# ij-f <c, pij, a k )) * c, (8) 
wherein Z is the sum over the points with indices i,j in 
said area k. This again ensures that the average color of 
a given local area k of the modified image is equal to 
5 the average color of the same area of the original image. 

Function f can be implemented algorithmi- 
cally, e.g. by providing a chromatic shift for any given 
color Cj_j and any local area k. The chromatic shift is 
given by two colors Cfc>(Cij) and Cf(Cij), wherein the 
10 , function f depends on said coverage-balanced chromatic 
shift in such a way that 

f(C, Pmin* a k ) — CfctCij) and 

f<C, Pmax' 0C k ) = Cf(Cij), 
wherein Pmi n and P m ax are the minimum and maximum possi- 
15 ble pattern values Pij. Between these values, f can e.g. 
be calculated by linear interpolation. 

For calculating the chromatic shift for a 
given color Cij, various methods can be used. As de- 
scribed above, it is e.g. possible to provide a reference 
20 shift for one reference color K. The reference shift is 
given by two colors and Kf, wherein K, and Kf lie 
on a single line in an Euclidean additive color space and 
K is located in the center of K^, and Kf . The reference 
shift corresponds to the chromatic shift for color Cij if 
25 Cij = K and a k = (p ma x + Pmin)/ 2 * The reference shift can 
then be balanced e.g. using Eq. (2) above. Then, depend- 
ing on the position of the colors K and Cij, the values 
Cfc(Cij) and Cf (Cij) can be derived by correcting hue, 
saturation and luminance, e.g. using Eqs. (3) - (5) . 

- 30 

While there are shown and described presently 
preferred embodiments of the invention, it is to be dis- 
tinctly understood that the invention is not limited 
thereto but may be otherwise variously embodied and prac- 
35 ticed within the scope of the following claims. 
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Claims 


1. A method for generating a security docu- 
ment by applying a security pattern to an original image 

5 for generating a modified image, characterized in that 
said security pattern comprises a plurality 
of points, wherein each of said points represents a pat- 
tern value Pij and wherein local averages cc^ are calcu- 
lated from said pattern values for at least some areas k 
10 of said security pattern, and 

wherein for at least some of the points in 
said security pattern the color Cij of the corresponding 
point of the original image is replaced by a modified 
color C'ij according to 
15 C'ij = f (Cij, Pij, ct k ) , 

wherein f is a function that depends on at least one lo- 
cal average ct k of an area k said point is located in. 

2. The method of claim 1, wherein said func- 
tion f is such that 

20 if m and M are real numbers with m < a k < M, 

and wherein C m = f(Cij, m, ay) and = f(Cij, M, ot^) , 

and if Cij lies within a color space with a 
Euclidean metric and we define R m as the Euclidean dis- 
tance between C m and Cij and Rjy[ as the Euclidean distance 
25 between C^ and Cij , 

then for any value pij in the interval [m, 
M] , the Euclidean distance between Cij and f(Cij, Pij/ 
Cik) lies within the interval [0, max(R m , Rj^) ] . 

3. The method of one of the preceding claims, 
30 wherein said function f(Cij, Pij/ <*k) ^ s continuous in 

Pij- 

4. The method of one of the preceding claims, 
wherein said local averages otk are calculated as a 
weighted sum 

35 ot k = I A k#i j -Pij 

wherein A K is a matrix of weights and Z is the sum over 
the points with indices i,j in said area k, and 
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wherein said function f has the property 
that, for any color C of said original image in said area 
L (A k/i j-f(C, pij, a k )) - C. 

5. The method of claim 4, wherein all ele- 

5 ments of said matrix A k are equal to 1/N k , wherein N k is 
the number of points in said area. 

6. The method of one of the preceding claims 
wherein said security pattern is generated by repeti- 
tively tiling a pattern element. 

10 7. The method of one of the preceding claims, 

wherein said security pattern comprises a plurality of 
characters and wherein said local areas are rectangular 
areas, each of said rectangular areas enclosing one char- 
acter . 

15 8. The method of one of the preceding claims 

further comprising the step of providing a chromatic 
shift for any given color Cij and any local area k, said 
chromatic shift being given by two colors CfcfCij) and 
Cf(Cj[j), wherein said function f depends on said cover- 

20 age-balanced chromatic shift such that 

f(C, Pmi n , <X k > = Cb(Cij) and 

f < c ' Pmax' a k> = c f< c ij> and 
for Pmin anc ^ Pmax being the minimum and maximum possible 
pattern values pj_ j . 
25 9. The method of claim 8, wherein 

f(Cij, Pij,-cc k ) = Cb(Cij) ■ (Pij - Pmin) /(Pmax r Pmin> 
+ Cf (Cij) • (Pmax - Pij) /(Pmax " Pmin> 
10. The method of claim 9 further comprising 

the steps of 

30 choosing a reference shift for a reference 

color K, wherein said reference shift is given by two 
colors Kb and Kf and corresponds to said chromatic shift 
for said color Cij if Cij = K and a k = (Pmax + Pmin> /2 ' 
calculating said chromatic shift for any 

35 other color Cij from said reference shift by transforming 
said two colors and Kf as a function of color Cij and 
said local averages a k . 
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11. The method of claim 10, wherein said ref- 
erence color K and said two colors Kb and Kf are arranged 
on a line in an Euclidean, additive color space, wherein 
- K = K - Kf and wherein said step of calculating said 
5 chromatic shift comprises the steps of 

calculating first corrected colors Kb' and 

Kf ' from 

K b ' = K b + d 
Kf' = Kf + d 
10 with 

d = (K f - Kb) • <otk ~ <Pmax - Pmin) / 2 > / (Prnax " Pmin> ' 
and calculating said two colors C b (Cij) and 
Cf(Cij) from said first corrected colors K b ' and Kf', 
said reference color K and said color j . 
15 12. The method of one of the claims 10 or 11 

comprising the step of calculating said two colors 
Cb(Cij) and Cf(Cij) 

by correcting the luminance of the chromatic 
shift according to the luminance difference between the 
20 reference color K and the color Cj[ j , and/or 

by correcting the hue of the chromatic shift 
according to the hue difference between the reference 
color K and the color C^-j, and/or 

by correcting the saturation of the chromatic 
25 shift according to the saturation difference between the 
reference color K and the color C-^ j - 

13. The method of claim 11 or 12 comprising 
the step of correcting a CIE-Lab luminance difference be- 
tween said two colors Cb(Cij) and Cf(Cij) to make it 

30 equal to the CIE-Lab luminance difference between said 
two colors K b and Kf . 

14. The method of one of the preceding claims 
wherein said pattern values are binary having values of 0 
and 1, wherein for a pattern value of 0 the color C^j of 

35 the corresponding point of the original image is shifted 
in a first direction and for a pattern value of 1 the 
color Cf-j of the corresponding point of the original im- 
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age is shifted in a second direction, and in particular 
wherein, in a given Euclidean color space, said first di- 
rection is opposite to said second direction. 

15. The method of one of the preceding claims 
5 wherein said original image is a holder's photograph on 

an identity document. 

16. The method of one of the preceding claims 
comprising the step of printing the modified image oh a 
continuous-tone printer. 

10 17. A security document obtainable by the 

method of one of the preceding claims. 

18. The security document of claim 17, 
wherein said security document is a driving license. 

19. The security document of one of the 

15 claims 17 or 18, wherein said pattern is a text repre- 
senting information that is also elsewhere visible on 
said document, and in particular wherein said text is at 
least partially encrypted. 
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